Virus and Spyware Removal Guides, uninstall instructions

What is Mado?

Mado is a malicious program belonging to the Stop/Djvu ransomware family. When a system is infected with this malware, its data is encrypted so that the cyber criminals responsible can make ransom demands for decryption tools/software. During the encryption process, all affected files are appended with the ".mado" extension.

Following encryption, a file such as "1.jpg" would appear as "1.jpg.mado", and so on for all files. After this process is complete, a file named "_readme.txt" is created on the desktop.

What is TotalLetterSearch?

TotalLetterSearch is an unwanted application classified as adware. This adware is a part of a group of adware-type applications called AdLoad. Adware is simply designed to display various advertisements, however, this particular app also promotes the address of a fake search engine.

In this way, TotalLetterSearch functions both as adware and a browser hijacker. Note that it might also track and record information.

Users often download and install adware-type apps inadvertently. Research shows that, to trick people into installing TotalLetterSearch, developers use a fake Adobe Flash Player installer. This type of installer can also be used to proliferate Trojans, ransomware and other malware.

What is AtlantaLookup?

AtlantaLookup is an adware-type application that possesses browser hijacker capabilities. It runs intrusive advertisement campaigns. I.e., delivers various unwanted and harmful ads. Additionally, AtlantaLookup modifies browser settings to promote a bogus search engine.

Adware and browser hijackers usually monitor users' browsing activity. Most users install this app unintentionally and so it is classified as a Potentially Unwanted Application (PUA).

AtlantaLookup has been observed being spread via fake Adobe Flash Player updaters and installers, which are commonly used to distribute adware, browser hijackers and even malware (e.g. ransomware, Trojans, etc.).

What is DeluxeFocus?

DeluxeFocus is one of many applications that supposedly improves the browsing experience and delivers various other features. In fact, it is classified as a potentially unwanted application (PUA) that feeds users with advertisements and gathers information. These applications are classified as adware.

Typically, people do not download or install adware intentionally. Note that this app is designed to promote the Safe Finder website by opening it through akamaihd.net.

What is Tuneup Pro?

Tuneup Pro is advertised as a program which includes features and tools to enhance computer performance. In fact, it is categorized as a potentially unwanted application (PUA) due to its distribution methods.

Like many other PUAs, Tuneup Pro is distributed by including it into various download or installation set-ups as "additional offers". Commonly, people download and install PUAs unintentionally.

What is LiveStreamNewsToday Promos?

The LiveStreamNewsToday Promos program feeds users with advertisements. Programs of this type belong to a category of adware-type software.

Commonly, adware is designed to display ads and gather information. People often download and install adware inadvertently and, for this reason, LiveStreamNewsToday Promos and other programs of this type are classified as potentially unwanted applications (PUA).

What are the Roanbours websites?

Roanbours is a group of deceptive websites promoting various scams. Websites belonging to the group have been observed promoting the "Dear Safari User, You Are Today's Lucky Visitor" scheme, however, they can promote others as well. Trusting these scams can lead to serious issues, and endanger device and user safety.

Typically, access to deceptive/scam web pages is caused via redirects caused by intrusive advertisements or Potentially Unwanted Applications (PUAs) already infiltrated into the system. Note that these apps do not need express permission to be installed onto devices.

What is basenews7[.]com?

basenews7[.]com is one of many untrusted websites that loads dubious content or redirects visitors to other bogus web pages. Some examples of other sites that operate in this way include topflownews[.]com, allow-space[.]com and belazyelephant[.]com.

Note that most users arrive at basenews7[.]com and others through similar websites and deceptive advertisements, or they are opened by installed potentially unwanted applications (PUAs). Apps of this type often gather browsing data and display ads. They are classified as PUAs, since people tend to download and install them unintentionally.

What is "International Official Lottery"?

"International Official Lottery" is a phishing scam promoted on various deceptive websites. It is presented as an online lottery, which users supposedly take part simply by entering the scam web page.

Once users attempt to collect their winnings, however, they are redirected to different websites, which steal the information entered into them (e.g. credit card and digital wallet details, email addresses and telephone numbers).

Most visits to these deceptive/scam pages occur via redirects caused by intrusive advertisements or Potentially Unwanted Applications (PUAs) already infiltrated into the system.

What is Kwampirs?

Kwampirs is a Remote Access Trojan (RAT), a type of malware that allows cyber criminals to control infected devices remotely. Once a RAT is connected to a computer, cyber criminals can access stored files, download malware, acquire login credentials and other personal information, and so on.

Research shows that cyber criminals behind Kwampirs target companies and organizations in various industries and attempt to access data that can be used to generate revenue.